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(57) Abstract: A method for providing a software 
module to an automotive vehicle control unit 
comprises the steps of a) establishing a connection 
between a programmable memory of the vehicle 
control unit and a programming device, b) generating 
a request message, die request message comprising 
a software module identifier for identifying the 
software module, c) sending the request message 
via a communication means to a server, d) receiving 
from the server an access message, enabling 
the programming device to access a software 
module , and e) loading the software module, by 
the programming device, into the programmable 
memory. 
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Title: Method for providing a software module to an automotive 
vehicle control unit, and computer program for executing the method. 

The invention relates to a method for providing a software 
module to an automotive vehicle control unit. Further, the invention 
relates to a method for enabling a software module in an automotive 
vehicle control unit. Still further, the invention relates to a 
5 method for providing access to a software module for use in an 
automotive vehicle control unit. AJLso, the invention relates to 
computer programs comprising program instructions for executing these 
methods . 

Currently, the use of computer systems in automotive vehicles 

10 is rapidly increasing, the computer systems being used for 
controlling an increasing amount of software modules in automotive 
vehicles, such as engine- and ignition control, airbag systems, anti- 
lock brake systems, electronic stability systems, instrument and/or 
display panels, anti theft security systems, ■ central locking, 

15 electric windows, etc. With the ever increasing amount of software 
modules which are controlled by such on-board computers, the rapid 
development of electronic components for such on-board computers and 
the current world-wide car market in which a large number of 
different manufacturers is introducing on the market an ever 

20 increasing amount of new car models, the amount of different on-board 
vehicle computers which are installed in current vehicles is rapidly 
increasing. Commonly each microcomputer in the vehicle is equipped 
with its own software which is stored in a memory, such as a memory 
chip, which is accessible to the microcomputer. 

25 Currently, the need emerges for providing an efficient 

mechanism for allowing service outlets, garages, and dealers to 
upgrade or reprogram software to be used by such computer system in 
the automotive vehicle. It is know to replace a memory means , such as 
semiconductor chip, e.g. an EPROM, in which the software is loaded, 

30 by an other one which comprises updated software, however this 
requires that the software is on stock at the dealer or service 
outlet, or alternatively will lead to a long lead time for obtaining 

1 
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the software. As service stations, such as car dealers, for servicing 
automotive vehicles, more and more tend to provide maintenance and 
repair services for several makes of automotive vehicles, the amount 
of different software modules required by a service station is 
5 rapidly increasing. Thus, memory chips which contain outdated 
software modules are frequently thrown away, which forms a waist of 
materials and electronic components, or alternatively need to be 
recycled by sending them back to the manufacturer which involves a 
substantial logistic and administrative organisation with associated 

10 costs. Further, delivery times for obtaining a new memory chip by a 
service outlet are long, as, at the moment when a new memory chip is 
required, first an order has to be placed at a distributor or a 
manufacturer of the automotive vehicle, after which the memory chip 
which has been ordered will be delivered by post, express service, 

15 etc. In general, the consequence of the above drawbacks is that 
service outlets for servicing automotive vehicles either spend 
unnecessary costs for ordering every new memory chip with software 
module which becomes available, and thus have available a large 
amount of memory chips which are hardly used, or frequently face the 

20 problem that an appropriate memory chip for a specific vehicle 
appears to be not on stock at the moment when such chip would be 
needed* 

The invention intends to at least partly take away the 
problems of the prior art and to provide an easy, user-friendly, 

25 quick and safe method for providing a software module to an 
automotive vehicle control unit. 

To achieve these and other goals, the method for providing a 
software module to an automotive vehicle control unit comprises the 
steps, by a programming device, of a) establishing a connection 

30 between a programmable memory of the vehicle control unit and the 
programming device, b) generating a request message, the request 
message comprising an software module identifier for identifying the 
software module, c) sending the request message from the programming 
device via a communication means to a server, d) receiving from the 

35 server an access message, enabling the programming device to access 
the software module and e) loading the software module, by the 
programming device, into the programmable memory of the vehicle 
control unit. Thus, the programmable memory can be loaded by the 

2 
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programming device with the software module. The steps according to 
the method can be performed locally, thus e.g. at the garage or 
service station, and make the software module available within a very 
short period of time. The programming device, can e.g. comprise a 
5 computer system or a mobile telephone. Also the programming device 
can comprise a communication device, preferably a serial 
communication device for an on-board diagnosis and/or for Engine 
Control Unit (ECU) programming and/or reprogr amming . Thus, a 
diagnostic instrument for e.g. serially reading out diagnostic and 

10 status information of the control unit, and programming or 
reprogr amming operational parameters in the ECU, is comprised in the 
programming device. The programming device can comprise a Vehicle 
Communication Interface (VCI) for establishing communication with the 
vehicle control unit. Further, the programming device can be 

15 connected with at least the programmable memory of the vehicle 
control unit via a cable, connector or other wired or wireless 
communication means . Alternatively, it is possible that the 
programming device is comprised in the automotive vehicle control 
unit. The server can e.g. be placed at the manufacturers premises or 

20 the distributor of the automotive vehicle control unit respectively 
of the software modules, however can also be placed at any other 
convenient location. The server is connected to the programming 
device by a communication means, such as a telephone line, the 
internet, or any other suitable wired or wireless communication means 

25 which might be known as such. Security is increased as access to the 
software module is only enabled when a corresponding access message 
is sent by the server to the programming device. Thus, it is possible 
from the server to control and monitor the use of a particular 
software module. Also, in case that a user is not authorised to use a 

30 particular software module, sending the access message by the server 
can be disabled or an invalid access message can be transferred to 
the programming device. A user can for example select the software 
module which needs to be provided to the automotive vehicle control 
unit from a table, or overview on a display or by any other selection 

35 means which might be known per se, such as search software for 
searching a specific software module. With the method, a required 
software module can be quickly and easily provided to the automotive 
vehicle control unit by generating a request message identifying the 

3 
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software module, sending the request message to a server, the server 
in response to the request message generating an access message and 
sending the access message to the programming device, the programming 
device being now able to get access to a corresponding software 
5 module, upon which the software module is loaded into the 
programmable memory by the programming device. The request message 
can be sent to the server via a communication means, such as the 
internet, or by telephone or facsimile. For this purpose, the server 
can incorporate a fax server, voice response server or any other 

10 interactive communication means, however it is also possible that the 
information contained in the request message is entered into the 
server manually. The access message can be transferred from the 
server to the programming device via the internet, a telephone 
network or any other communication means. The access message can e.g. 

15 also be transferred by telephone and entered into the programming 
device or into the automotive vehicle control unit by any suitable 
input means, such as a keyboard of a computer which might be 
comprised in the programming device, a keyboard comprised in the 
automotive vehicle control unit, a barcode read by a barcode reader, 

20 etc. The automotive vehicle control unit can comprise an on-board 
control unit comprised in the vehicle, such as an engine- and 
ignition control unit (ECO) , an anti-lock brake control unit, an 
airbag control unit, or any other control-, measurement-, or service 
unit which comprises a controlling device, such as a micro controller 

25 or any other computing unit. The automotive vehicle can comprise a 
car, a van, a truck, an MPV, an off the road vehicle etc.. Further, 
it is possible that the method according to the inventor is applied 
with a control unit for a stationary engine. 

Advantageously, the method comprises the further step of 

30 sending a confirmation message from the programming device to the 
server, after loading the software module in the programmable memory. 
The confirmation message, which is advantageously sent by the 
automotive vehicle control unit, provides for a confirmation to the 
server that the particular software module has " been programmed into 

35 the vehicle control unit. The confirmation received by the server can 
be stored in a database enabling tracebility as to which software 
module has been downloaded when and by whom into which vehicle or 

4 
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vehicle control unit. The tracebility will assist in avoiding 
liability issues for the vehicle manufacturer. 

Advantageously, step d) comprises the steps of dl) receiving 
from the server the access message comprising an access key, d2) 
5 deriving the access key from the access message, and d3) accessing 
the software module by the programming device using the access key. 
The access key can comprise any suitable access means, such as a 
password, a security code, access code, or any other suitable access 
means. In this manner, the software module, or a library of different 
10 software modules, can be available to the user, e.g. stored on a 
CDROM, downloadable from the internet, etc, while access to the 
software is only provided when an appropriate access key has been 
provided. 

Advantageously, the access key comprises a decryption key, step 
15 d3) advantageously comprising the step of decrypting the software 
module with the decryption key. Thus, access to the software can be 
controlled in a very effective manner, as only when an appropriate 
decryption key is available, access to the software module is 
provided. 

20 Advantageously, the method comprises the further step of g) 

charging, by the server, an amount to a user account for payment for 
the software module- Thus, upon receipt of a request message 
requesting access to a specific software module, an amount can be 
charged to a user account, the user thus paying for the software 

25 module requested. 

Advantageously, step g) comprises the further step of g.l) 
checking, in a user account database, prior payments for a same user 
and g.2) determining a value of the amount based on the prior 
payments. Thus, pricing schemes can be set up by checking prior 

30 amounts charged to the same user and determining a value based on the 
previously charged amounts. It is for example possible to avoid 
multiple payments for a same software module, by setting the amount 
to zero in case that the same software module has already been 
requested and paid. Also, quantum discounts can be provided for users 

35 who request for and pay a certain, predetermined amount of software 
modules within a certain time frame. 

Advantageously, the request message further comprises a 
destination identifier for identifying a destination for the software 

5 
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module. The destination identifier can advantageously be chosen from 
a group comprising a user identification, a vehicle identification, a 
programming device identification, a vehicle control 
unitidentification and/or a vehicle control unit memory 
5 identificaton. Thus, it is possible to provide a more detailed 
charging mechanism, as charging, and determining a height of the 
amount charged can further be based on a history of previous request 
messages and previous payments which are related to the same 
destination as the destination for the current request. Further, 

10 security and retraceability can be increased, as the destination for 
which the software module is requested (such as the user, the vehicle 
control unit, the programming device or a part thereof etc) is 
available at the server and can be stored in the server or in a 
memory which is accessible to the server. In particular in 

15 combination with the confirmation message described above, 
traceability will be excellent as the destination for the software 
module is known to the server, as well as confirmation of the loading 
of the software is provided. 

Advantageously, the access message received in step d) further 

20 comprises a code number determined by the server and step d) 
comprises the further steps of d5) deriving the code number from the 
access message d6) storing the code number in the software module, 
the software module further comprising a code number calculation 
module for calculating the code number, for enabling the software 

25 module to verify if the code number calculated by the code number 
calculation module equals the code number stored in the software 
module. Thus, a further protection against unauthorised use of the 
software is provided. The software module comprises a code number as 
well as a code number calculation module. At a suitable moment, e.g. 

30 when starting the software module by the vehicle control unit, the 
software module first calculates the code number using the code 
number calculation module and then compares the calculated code 
number with the code number stored in the software module. If the 
code number stored in the software module is identical to the code 

35 number calculated by the code number calculation module, then the 
software is enabled, but in case that the code number calculation 
module provides a code number which does not correspond to the code 
number stored in the software, the software module is not enabled. 

6 
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The code number calculation module is advantageously adapted for 
calculating the code number using at least one input parameter 
comprising the destination identifier. Consequently, when use of the 
software module at a different destination is attempted, the 
5 calculation performed by the code number calculation module will 
result in calculation of a different code number, as the code number 
calculation module performs the calculation of the code number using 
the destination identifier as an input parameter. As a different 
destination identifier will result in a different code number, the 

10 code number stored in the software will not correspond to the code 
number calculated by the calculation module, which results in limited 
or no availability of the software module. Thus, unauthorised copying 
of the software module and unauthorised use of the software module at 
various destinations, such as various vehicle control units, vehicle 

15 communication interfaces etc. can be prevented. As the code number 
calculation module is comprised in the software module, it is 
possible to use different code number calculation modules for a 
variety of software modules, because the appropriate code number 
calculation module for the specific software module is comprised in 

20 each particular software module. In case that a third party for 
example has successfully retrieved the calculation algorithm used by 
the code number calculation module which is applied in a specific 
software module, this third party could eliminate the protection of 
the code number calculation module by calculating appropriate code 

25 numbers for a variety of destination identifiers and by storing each 
code number in a corresponding software module to be loaded without 
authorisation into a corresponding vehicle control unit etc. As 
however each software module can comprise a different code number 
calculation module making use of a different code number calculation 

30 algorithm, a different algorithm, and thus a different code number 
calculation module can be comprised in each different software 
module, which significantly impedes unauthorised use of various 
software modules, as for each particular software module providing a 
specific software module, the algorithm applied for calculating the 

35 code number in the code number calculation module used in that 
specific software module has to be retrieved. The code number 
calculation module can perform any kind of operation for calculating 
the code number, including logical, mathematical, and/or any suitable 

7 



WO 2004/079565 



PCT/NL2003/000158 



type of operation. Also, the code number calculation module can make 
use of one or more input parameters , comprising advantageously the 
destination identifier identifying the destination for the particular 
software module , however any other suitable type of input parameter 
5 can be used. 

Advantageously, the method comprises the further steps of, by 
the server, before step d) providing a duplicate of the code number 
calculation tool to the server, calculating the code number in the 
server, and integrating the code number in the access message. Thus, 

10 the code number is calculated by a duplicate of the code number 
calculation tool (which comprises the same algorithm for calculating 
the code number as the code number calculation tool comprised in the 
software module) , resulting in a possibility to individually 
calculate a code number upon receipt of a request message requesting 

15 a software module for a particular destination. 

Advantageously, the software module comprises program 
instructions for, before enabling the software module in the 
automotive vehicle control unit, performing the steps of 
calculating the code number by the code number calculation module, 

20 comparing the code number calculated with the code number stored in 
the software module and 

enabling the software module only when the calculated code number 
equals the code number stored in the software module. 

The software module can be read from a memory means, which 

25 advantageously is chosen from a group comprising an optically 
readable disk, a magnetically readable disk, a magnetically readable 
tape and a semi conductor memory- The software modules can thus be 
available for the user on a memory means, such as a CDROM, 
advantageously in encrypted form, and upon receipt of an appropriate 

30 access message, access to a particular software module is provided. 
Alternatively, it is possible that the software module can be 
downloaded from the internet or any other computer network. 

The invention further comprises a method for enabling a 
software module in an automotive vehicle control unit, the software 

35 module having been provided to the instrument according to the method 
according to the invention, the method comprising the steps of 
calculating, in the automotive vehicle control unit, the code number 
by the code number calculation module, 

8 
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comparing the calculated code number with the code number stored in 
the software module, and enabling the software module only when the 
calculated code number equals the code number stored in the software 
module . 

5 Further, the invention comprises a method for providing access 

to a software module for use in an automotive vehicle control unit 
having a programmable memory, the method comprising the steps of, in 
a server receiving, from a programming device, a request message 
requesting access to the software module, the request message 

10 comprising a software identification for identifying the software 
module and sending an access message comprising an access key 
enabling the automotive instrument to access the software module, 
from the server to the programming device. 

The computer programs according to the invention comprise 

15 program instructions for executing the respective methods according 
to the invention. 

Further advantages and features of the invention will become 
clear from a description of the appended drawing, showing non- 
limiting embodiments of the invention, in which: 

20 Fig 1 shows a system for providing a software module to an 

automotive vehicle control unit according to the invention; 

Fig. 2 shows a flow diagram showing a method for providing the 
software module to the automotive vehicle control unit, according to 
the invention; and 

25 Fig. 3 shows a flow diagram describing a method for enabling 

the software module which has been provided to the vehicle control 
unit as described with reference to Fig. 2, in the vehicle control 
unit. 

Fig. 1 very schematically shows a vehicle with an automotive 
30 vehicle control unit 1 which is equipped with a programmable memory 
2. Fig. 1 further shows a programming device in this example 
consisting of a programming station 3 and a personal computer 4 which 
is connected via a suitable data connection 3b to the programming 
station 3 . The automotive vehicle control unit 1, or at least the 
35 programmable memory 2 can be connected to the programming station 3 
via a wired, radio frequency or infrared connection 3a, such that 
programming the programmable memory by the programming station 3 is 
made possible. The programming station 3 can comprise a protocol 

9 
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converter, voltage level converter , etc. . Further, the programming 
station 3 can comprise an automotive diagnostics instrument, such as 
a serial communication device for an on-board diagnosis and/or Engine 
Control Unit (ECU) programming and/or reprogramming . The programming 
5 station 3 can also comprise a Vehicle Communication Interface (VCI) . 
The personal computer 4 is connected to a server, such as in this 
example an internet server 6 which can be on a location remote from 
the personal computer 4. The personal computer 4 and the internet 
server 6 are connected to each other via a network 7, such as a 

10 telephone network, a private computer network or a public computer 
network such as the internet, and the personal computer 4 as well as 
the internet server 6 is connected to the network 7 via a suitable 
communication link 8a, 8b, respectively, such as for example a modem, 
a data c ommun ication line, a local area network, etc. The automotive 

15 vehicle control unit 1, the programmable memory 2, programming 
station 3 and personal computer 4 will in practice be positioned at a 
service outlet, garage, car dealer, or alternatively at a service 
outlet or dealer for the automotive vehicle control unit, however any 
other location is possible too. The server 6 will typically be under 

20 control of a manufacturer or authorised dealer of the automotive 
vehicle control unit 1, which enables such person, firm or party 
controlling the server 6 to allow or deny access for a user of the 
programming station 3 and personal computer 4 to a software module 
for the automotive vehicle control unit 1, as will be explained in 

25 more detail below. In this example, the software module (also called 
software or software program) is available to the user of the 
programming station 3 and personal computer 4 on a computer readable 
medium, such as a CD-ROM 5. The CD-ROM 5 comprises one or more 
software modules for the automotive vehicle control unit 1, which are 

30 incorporated in suitable software programs. The software is stored on 
the CD-ROM 5 in an encrypted manner, and will need a decryption 
before being able to be functionally applied. The operation of the 
system according to Fig. 1 will be described with reference to Fig. 
2. The software module can comprise program instructions to be 

35 executed by the automotive vehicle control unit 1, however it is also 
possible that the software module comprises parameters, parameter 
arrays, -fields or any other data to be used by the automotive 
vehicle control unit 1. 
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Fig* 2 shows a flow diagram comprising steps 20 to 28 , which 
are performed in the programming device, i.e. the personal computer 
4, the programming station 3, or both. Further, Fig. 2 shows steps 
30-35, which are performed by the server 6 shown in Fig 1. In step 
5 20, a connection is established between the programmable memory 2 of 
the vehicle control unit 1, and the programming device, in this 
example the programming station 3. This can take place by 
electrically connecting the memory 2 to the programming station 3. 
Upon selection of the software module by the user of the personal 

10 computer 4 and inputting the selection by the user into the personal 
computer in a manner known per se, a request message is generated in 
step 21. The request message comprises a software module identifier 
for identifying the software module requested, such as a software 
number, and advantageously comprises a destination identifier such as 

15 a memory number, control unit number, user number, customer number, 
vehicle identification number, or any other suitable identifier. 
Then, in step 22 the request message is sent from the personal 
computer 4 via the network 7 to the server 6. In step 30, in the 
server, is determined if the request is valid. Such determination of 

20 validity can e.g. be performed based on the destination identifier, 
i.e. by checking in a database in or operationally connected to the 
server 6 if the request comprises a destination identifier which is 
comprised in a list of valid destination identifiers comprised in the 
database. Then, a decryption key is determined in step 31. The 

25 decryption key can be dependent on the software module, i.e. on the 
particular software requested which is on the CD-ROM 5, however it is 
also possible that the decryption key is user dependent, destination 
dependent, etc. Then, in step 32 in the server a code number is 
calculated making use of a code number calculation module which 

30 resides in the server or is accessible by the server. The software 
module of the code number and the code number calculation module will 
be explained in more detail below. In step 33 a user account is 
charged for the requested software module. The charging can be 
performed on a fixed fee basis, however it is also possible that an 

35 amount of the charging is based on e.g. prior payments, a discount 
schedule, or any other suitable other parameter. In step 34, an 
access message is generated, the access message comprising the 
decryption key which has been determined in step 31 and the code 

11 
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number calculated in step 32- Then, in step 35 the access message is 
sent to the programming device, in this example the personal computer 
4, via the network 7 and received therein in step 23. Following 
receipt of the access message, in step 24 the decryption key is 
5 derived from the access message, with which the requested software 
which is stored on the CD-ROM is decrypted in the personal computer 
4, as indicated with step 25. Also, in step 26 the code number is 
derived from the access message and the code number is stored in the 
software which has been decrypted in step 25. Then, in step 28 the 

10 software module is loaded by the programming station 3 into the 
programmable memory 2. Further, a confirmation message (not shown in 
fig. 2) can be sent to the server for confirming completion of the 
loading of the software module in the memory 2 of the vehicle. Thus, 
a protection against unauthorised use of the software module 

15 comprised in the software is accomplished, as only a user or 
destination which is considered valid by the server 6 will receive an 
appropriate access message with which access to the software 
comprising the software module is provided. 

When, in the automotive vehicle control unit, a start of the 

20 software module is requested, as indicated with step 40 in Fig. 3, 
then the software module first calculates the code number in step 41. 
The calculation of the code number is performed making use of the 
code number calculation module which is comprised in the software 
module and at least one input parameter which comprises the 

25 destination identifier (such as a vehicle control unit serial number, 
a user number or customer number, or any other suitable 
identification for identifying the destination at which running of 
the software is requested) . The destination identifier will 
advantageously be stored in the vehicle control unit 1. In step 42, 

30 the calculated code number is compared with the stored code number 
which is stored in the software. If the calculated code number is 
equal to the stored code number then the software module is enabled 
in step 43. If the calculated code number is not equal to the stored 
code number then the software module is disabled, i.e. availability 

35 of the software module on the particular automotive vehicle control 
unit being inhibited. Thus, the software module is only started in 
case that a correct code number is calculated, i.e. the software 
module is only started at a predetermined destination, as only a 

12 
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destination comprising the predetermined destination identifier will 
result in a calculation of a code number which corresponds to the 
stored code number ■ Thus, use of the software or a copy thereof, at 
other destinations, i.e. at other vehicle control units, other users, 
5 etc. is prevented. Further, as the code number calculation module is 
comprised in the software, it is possible to incorporate different 
code number calculation modules in different software modules, thus 
in case that an unauthorised person should have successfully 
retrieved the algorithm behind a particular code number calculation 

10 tool comprised in a particular software module, then this person only 
has access to the particular software module which comprises the 
particular code number calculation tool, however not to all other 
software modules which comprise a different code number calculation 
tool. In the example described above, the software module has been 

15 made available to the user on a CD-ROM, however it is also possible 
that the software module is stored on a magnetically readable disk, a 
magnetically readable tape, a semiconductor memory. Further, it is 
possible that the software module is downloaded from the internet. 

Consequently, the invention provides a user-friendly, fast and 

20 secure way for providing a software module to an automotive vehicle 
control unit as a request for obtaining access to the software module 
is sent to a server, upon which the server provides an access message 
advantageously comprising an access key, such as a decryption key, 
enabling access to the software module. The server can determine 

25 validity of the request and can provide for a charging of an amount 
to a user account for payment of the software. An advantage of the 
system and method according to the invention is that the software can 
be distributed in advance, while use of the software is controlled 
via the access message as described above and payment for the 

30 software takes place when access to the software is provided. Thus, 
it is not required to send large files via the internet or another 
network, as the software itself, which comprises the software module, 
is already present on the CD-ROM, while only comparatively small 
messages need to be sent via the internet for providing access to the 

35 software. 

By making use of the method and system according to the 
invention, as described in particular with reference to Fig. 1 and 
Fig. 2, it is possible to provide the software to the vehicle quickly 
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and easily. Thus, when a function comprised in a software module, is 
required, a request message is sent to the server, which results in 
an access message to be sent from the server to the programming 
device. With the access message access is provided to the software 
5 which can reside on a CD-ROM or any other suitable means. The CD-ROM 
or other means on which the software modules are stored can be 
distributed to a wide range of dealers, and/or other service outlets. 
It is possible with the method and system according to the invention 
to only charge the dealer or service outlets at the moment when a 

10 specific software module comprised on the CD-ROM is accessed, as 

charging can take place upon sending an access message by the server 
to the programming device. In this manner it is not required to send 
large amounts of data via a network, such as the internet or other 
communication means, such as a telecommunication network, as the 

15 software module itself is available advantageously on the CD-ROM, 
while only a small amount of data, i.e. the request message and the 
access message is transferred via the network. Further, traceability 
can be provided as with the destination identifier it is possible to 
keep record in the server of the destination for which an access 

20 message has been provided, i.e. it is possible to keep track of the 
destinations to which a particular software module will be 
transferred. The destination identifier in this example 
advantageously comprises the vehicle identification number (VIN) , but 
of course any other identification number such as a micro controller 

25 identification number or engine management number or engine serial 
number can be applied. Advantageously, in a further aspect of the 
invention, the method according to the invention comprises the 
further step of sending a confirmation message from the programming 
device to the server, the confirmation message comprising a 

30 confirmation that the software module has been loaded into the 
programmable memory which is comprised in the vehicle. Thus, 
traceability can be optimised as it is possible to not only keep 
record of the request messages and access messages, but to also keep 
track of the confirmation messages confirming that the software is 

35 downloaded into the particular vehicle. The confirmation message 
advantageously comprises the destination identifier and an 
identification of the software module. 
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CLAIMS 

1. A method for providing a software module to an automotive 
5 vehicle control unit, the method comprising the steps, by a 

programming device, of: 

a) establishing a connection between a programmable memory of the 
vehicle control unit and the programming device; 

b) generating a request message, the request message comprising a 
10 software module identifier for identifying the software module; 

c) sending the request message from the programming device via a 
communication means to a server; 

d) receiving from the server an access message, enabling the 
programming device to access the software module; and 

15 e) loading the software module, by the programming device, into the 
programmable memory of the vehicle control unit. 

2. The method according to claim 1, characterised by the 
further step of 

20 f ) sending a confirmation message from the programming device to the 
server, after loading the software module in the programmable memory. 

3. The method according to claim 1 or 2, characterised in that 
step d) comprises the steps of: 

25 dl) receiving from the server the access message comprising an access 
key; 

d2) deriving the access key from the access message; and 

d3) accessing the software module by the programming device using the 

access key. 

30 4. The method according to claim 3, characterised in that the 

access key comprises a decryption key, step d3) comprising the step 
of decrypting the software module with the decryption key. 

5. The method according to any of the preceding claims, characterised 
35 in that the method comprises the further step of 

g) charging, by the server, an amount to a user account for payment 
for the software module. 
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6. The method according to claim 5, characterised in that step g) 
comprises the further step of: 

gl) checking, in a user account database, prior payments for a same 
user; and 

5 g2) determining a value of the amount based on the prior payments. 

7. The method according to any of the preceding claims, characterised 
in that the request message further comprises a destination 
identifier for identifying a destination for the software module. 

10 

8. The method according to claim 7, characterised in that the 
destination identifier is chosen from a group comprising a user 
identification, a vehicle identification, a programming device 
identification, a vehicle control unit identification and/or a 

15 vehicle control unit memory identification. 

9. The method according to any of claims 3-8, characterised in that 
the access message received in step d) further comprises a code 
number determined by the server and in that step d) comprises the 

20 further steps of: 

d5) deriving the code number from the access message; 
d6) storing the code number in the software module, the software 
module further comprising a code number calculation module for 
calculating the code number, for enabling the software module to 

25 verify if the code number calculated by the code number calculation 
module equals the code number stored in the software module. 

10. The method according to claim 9, characterised in that the code 
number calculation module is adapted for calculating the code number 

30 using at least one input parameter comprising the destination 
identifier. 

11. The method according to claim 9 or 10, characterised by the steps 
of, by the server, before step d) : 

35 providing a duplicate of the code number calculation tool to the 
server; 

calculating the code number in the server; and 
integrating the code number in the access message. 
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12. The method according to any of claims 9 - 11 r characterised in 
that the software module comprises program instructions for, before 
enabling the software module in the automotive vehicle control unit, 

5 performing the steps of: 

calculating the code number by the code number calculation module; 
comparing the code number calculated with the code number stored in 
the software module; and 

enabling the software module only when the calculated code number 
10 equals the code number stored in the software module. 

13. The method according to any of claims 1 to 12, characterised in 
that step d) comprises the further step of downloading the software 
module from the internet. 

15 

14. The method according to any of claims 1 to 12, characterised in 
that step d) comprises the further step of reading the software 
module from a memory means. 

20 15. The method according to claim 14, characterised in that the 

memory means is chosen from a group comprising an optically readable 
disk, magnetically readable disk, a magnetically readable tape, and a 
semiconductor memory. 

25 16. The method according to any of the preceding claims, 

characterised in that the programming device comprises a serial 
communication device for an on-board diagnosis and/or Engine Control 
Unit (ECO) programming and/or reprogramming . 

30 17. A method for enabling a software module in an automotive vehicle 
control unit, the software module having been provided to the 
instrument according to the method according to any of claims 9 or 
12, the method comprising the steps of: 

calculating, in the automotive vehicle control unit, the code number 
35 by the code number calculation module; 

comparing the calculated code number with the code number stored in 
the software module; and 
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enabling the software module only when the calculated code number 
equals the code number stored in the software module. 

18. A method for providing access to a software module for use in an 
5 automotive vehicle control unit having a programmable memory, the 

method comprising the steps of, in a server: 

receiving, from a programming device, a request message requesting 
access to the software module, the request message comprising a 
software identification for identifying the software module; and 
10 sending an access message comprising an access key enabling the 

automotive instrument to access the software module, from the server 
to the programming device. 

19. A computer program comprising program instructions for executing 
15 the method according to any of claims 1 to 16. 

20. A computer program comprising program instructions for executing 
the method according to claim 17. 

20 21. A computer program comprising program instructions for executing 
the method according to claim 18. 
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